CASE STUDY: The Province of Groningen, the Netherlands

Streamlining Onboarding and Offboarding
Processes with Ivanti Identity Director

Profile:The administrative link between the national
government and municipalities, employing
1,300 people.
Location:
Groningen, Province Groningen,the Netherlands
Industry:
Government
Website:www.provinciegroningen.nl
Solutions:▪ Ivanti® Identity Director▪ Ivanti® Automation
Consultancy Partner:
IT-Value
Key Benefits:▪ New employees are productive
quickly thanks to automatic
onboarding▪ Improved security by revoking
access rights automatically upon
termination of employment▪ Automation enables improved IT
support of end users▪ User-friendly software enables
independent management of users▪ Simplified construction and rollout of
new images for Citrix (goldenimages)▪ Smooth implementation of Windows
updates▪ Fully automatic check of changes
for the helpdesk▪ Ivanti’s future-oriented portfolio
offers ample opportunities forexpansion; the solutions can be
integrated easily with each otherwww.ivanti.com

Today’s society requires a provincial government that carefully examines
its various roles, and that gives people, municipalities, civil-society
organizations, and businesses confidence in the Groningen ProvincialCouncil. The council forms the administrative link between the national
government and the municipalities. The 1,300 employees do their best
every day to ensure that policies are implemented as smoothly aspossible in the various policy areas: from healthcare to economy, from art
and culture to spatial planning. This requires an organization thatfunctions smoothly. Until recently, the onboarding, changes, andoffboarding of employees went through an outdated, self-developed
solution that could no longer support the processes. Consequently, theProvince of Groningen decided to call in the assistance of consultancy
partner IT-Value to provide an efficient and effective solution.
In the old solution, known as ‘Data Warehouse,’ almost everything had to be
tuned manually, which meant the onboarding and offboarding of employees
took a lot of time. “We had to set up an account, create a mailbox, set a
password, and then link this to Active Directory, where the phone number androom number had to be entered,” says Karim van Uggelen, Technical ProjectManager at the Province of Groningen. “Applications were delivered manually.
In addition, the maintenance of the system became too complex and timeconsuming: it was all custom-made and outdated. This prompted us to look for asystem that could support the onboarding, changes, and offboarding process of
employees in an automated manner.”

Ivanti Solutions Integrate Easily with Each OtherThe Province was already using a number of Ivanti solutions, including
Automation, used to build and roll out new “golden” images for Citrix, and also
the Ivanti workspace solution, used for setting up and managing user profilesand linking additional mailboxes. Van Uggelen says, “Ivanti significantly
simplifies user management. Application data that users normally store on theirlocal hard disk is now on a network drive. This makes it easier to retrieve thedata in case of errors and malfunctions.”
He continues, “We use Ivanti Automation, among other things, to stop and start
applications and to transfer data to other systems. The monthly Windows
updates are implemented with Citrix and Ivanti Automation. Our experience withIvanti and its solutions has been good, so the decision to consider Ivanti Identity
Director was obvious. Other Identity and Access Management (IAM) solutions
were also examined, but Ivanti Identity Director was chosen because thesolution is easy to integrate with the other Ivanti solutions. The software can be
managed independently without customization and offers plenty of possibilities
for expansion in the future.”

CASE STUDY: The Province of Groningen, the Netherlands

The Implementation of Ivanti Identity
Director
The Province purchased Ivanti Identity Director to support
all 1,300 employees. A complete Development, Testing,and Acceptance environment has also been set up basedon IT policy. Van Uggelen is pleased with the cooperationof its implementation partner, IT-Value: “It is a nicecompany that has more than enough knowledge at boththe social and technical level. They have helped us from Ato Z with the choice and implementation of Ivanti Identity
Director.”
Van Uggelen adds, “In the exploratory phase they
informed us about the possibilities of Ivanti Identity
Director. At the start of the project, they worked out thefunctional and technical design with the projectstakeholders. This is an important basis for the further
expansion of this process. During the implementation, thecooperation was close. Our managers were kept informed
throughout the work, which enabled them to learn more
about the product at the same time.”
Ivanti Identity Director is fed from the personnel
administration system: here the personal and function datais entered and used by Ivanti Identity Director for theautomatic creation of mailboxes and passwords. “Thatwas a big challenge, because we have to deal with a lot ofexceptions, from group employees who are not employed
by us, but have a mailbox, to retired employees who mustremain in the HR system but don’t need an account,” says
Van Uggelen. “The system must provide for all of this. We
had to bring it all together. Fortunately, thanks to theflexibility of Ivanti and IT-Value, that went smoothly, and it
is now running as it should.”

Ivanti Identity Director Simplifies andOptimizes Processes
The creation of new users and their associated accounts
is now automatic, but that is only the first step in taking
advantage of the possibilities of Ivanti Identity Director.
Says Van Uggelen, “At the moment, we only use Ivanti
Identity Director for staff onboarding and offboarding. It’s
used to create and link the account, the mailbox, and thewww.ivanti.com

password. But, in the near future, we are going to extend
that to access security with role-based rights. Then people
will gain access to the right applications and data
automatically, based on their role and location. For
example, when someone joins another department orchanges roles, the access rights will be automaticallyadjusted accordingly. And we will no longer need to worry
about security and compliance when someone leaves
service since the access rights are automatically revoked.”In addition, Ivanti Identity Director provides significant timesavings for the helpdesk. Previously, all changes werechecked manually; it’s now fully automatic. “In the unlikely
event that something goes wrong, we will be notified byemail,” says Van Uggelen. “Also, the process has become
more transparent and we can now see much better where
things go wrong and optimize processes. For example, anexit date must be filled in, otherwise the system willsupplement this with the employee pension date. This
helps ensure extra security.”
The process of onboarding new employees is now
followed automatically twice a day, instead of once as
before. This has given the Province more flexibility toensure that employees can get to work more quickly.
Concludes van Uggelen, "With all the time savings and thegains in efficiency, we can focus more on serving our end
users, instead of being busy keeping the system running. I
expect that this will only become more so in the future.”
Note: The results for The Province of Groningen, the Netherlands
are specific to its total customer environment / experience, ofwhich Ivanti is a part. Individual results may vary based on eachcustomer’s unique environment.

Learn More
www.ivanti.com
1 800 982 2130
sales@ivanti.com
Copyright © 2019, Ivanti. All rights reserved. IVI-2278 02/19 GV/MK/DL